RPC 111

bashCopy codenc -nv 10.11.1.72 111

Using Nmap for RPC Enumeration

Scan with NFS Scripts:

nmap -sV --script=nfs-* 192.168.101.130

TCP Connect Scan for Port 111:

nmap -sSUC -p 111 10.10.10.10

Scan Range for Port 111:

nmap -v -p 111 10.11.1.1-254

RPC Info Script Scan:

nmap -sV -p 111 --script=rpcinfo 10.11.1.1-254

Using rpcbind

Find rpcbind Services:


Using rpcinfo for RPC Services

Query RPC Info:


Null Session Access with rpcclient

Access with Null Credentials:

If connection is successful, try these commands:


Mount NFS Shares

Show NFS Shares:

Mount NFS Share (example):

Last updated